Privacy & Cookie Policy
Last updated: October 2026
At Poppy Design Studio, we take your privacy seriously.
This Privacy & Cookie Policy explains how we collect, use, store and protect your personal information, as well as how cookies and similar technologies are used when you visit our website.
It applies when you visit our website, contact us, become a client, sign up to our newsletter or use one of our services.
We handle personal information in accordance with applicable UK data protection and privacy law, including the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and, where applicable, the Privacy and Electronic Communications Regulations (PECR).
Who we are
Poppy Design Studio is a trading name of:
Poppy Design Studio & Marketing Ltd
Company number: 14159267
Registered in England and Wales
Registered address:
Hazelrigg House
33 Mare Fair
Northampton
NN1 1SR
Email: hello@poppydesignstudio.com
Telephone: 0800 321 3843
For the purposes of UK data protection law, Poppy Design Studio & Marketing Ltd is the data controller for personal information covered by this policy.
Privacy
What information we collect
The information we collect depends on how you interact with us and the services you use.
It may include:
- Your name
• Business or organisation name
• Email address
• Telephone number
• Postal or business address
• Information submitted through forms on our website
• Information you provide when requesting a quotation or making an enquiry
• Information required to provide and manage our services
• Communications between you and Poppy Design Studio
• Billing, payment and transaction information
• Domain registration and website-related information where required to provide those services
• Technical information relating to your use of our website
• Marketing and newsletter preferences
We only collect information that is reasonably necessary for the purposes for which it is being used.
How we collect your information
We may collect personal information when you:
- Complete a form on our website
• Contact us by email, telephone or social media
• Request a quotation
• Become a client
• Purchase or use one of our services
• Register or manage a domain through us
• Sign up to our newsletter
• Communicate with us during a project
• Give us feedback or leave a review
We may also receive information from third parties where appropriate, for example where someone refers you to Poppy Design Studio or where information is required to provide a service you have requested.
Our services
We may process personal information when providing our services, including:
- Website design
• Website hosting
• Email services
• Domain registration and management
• Graphic design
The information required will depend on the service we are providing.
For example, providing a domain registration service may require us to provide certain registration information to the relevant domain registrar or registry.
Where we process personal information on behalf of a client as part of providing a service, our role may be that of a data processor rather than a data controller. Where appropriate, this will be governed by our contractual arrangements with the client.
Client information and Zoho CRM
We use Zoho CRM to manage information relating to our clients, enquiries, projects and business relationships.
Client information held within our CRM may include contact details, company information, communications, details of services provided and information relevant to managing our relationship with you.
We use this information to:
- Respond to enquiries
• Prepare quotations and proposals
• Manage client relationships
• Deliver and support our services
• Keep appropriate records of projects and communications
• Manage ongoing services and renewals
Access to client information is limited to people who need it for legitimate business purposes.
Website analytics
We use Independent Analytics to understand how visitors use the Poppy Design Studio website.
Independent Analytics runs within our WordPress website and provides information such as which pages are visited, traffic sources and how visitors navigate our website.
We use this information to understand how our website performs and to help us improve it.
Independent Analytics is designed to provide website analytics without using cookies to track individual visitors.
We do not currently use Google Analytics or Meta Pixel on this website.
If we introduce additional analytics, advertising or tracking technologies in the future, we will review and update this policy and our consent arrangements where required.
Why we use your personal information
We may use personal information to:
- Respond to enquiries
• Prepare quotations and proposals
• Provide and manage our services
• Design and deliver client projects
• Register and manage domains
• Provide website hosting and email services
• Communicate with clients about projects, renewals and services
• Provide technical and customer support
• Process payments and maintain financial records
• Manage client relationships through Zoho CRM
• Maintain the security and operation of our website and systems
• Prevent fraud, misuse and malicious activity
• Improve our website and services
• Request feedback and reviews
• Send newsletters and marketing communications where permitted
• Meet our legal, accounting and regulatory obligations
• Establish, exercise or defend legal claims
Our lawful bases for using your information
UK data protection law requires us to have a lawful basis for processing personal information.
Depending on the circumstances, we may rely on:
Contract
Where processing is necessary to take steps at your request before entering into a contract or to provide services under an existing contract.
Legitimate interests
Where processing is reasonably necessary for the legitimate operation of our business and those interests are not overridden by your rights and interests.
This may include responding to business enquiries, managing client relationships, maintaining appropriate business records, improving our services and protecting the security of our website and systems.
Legal obligation
Where we need to process or retain information to comply with legal, tax, accounting or regulatory requirements.
Consent
Where required, we will ask for your consent before using your personal information for a particular purpose.
Where we rely on consent, you can withdraw it at any time.
Newsletters and marketing
We use Brevo to manage and send our email newsletters and marketing communications.
If you sign up to our newsletter, we will use the information you provide to send you Poppy Design Studio news, useful information, updates and information about our services.
Where we rely on consent, you can withdraw that consent at any time.
We may also contact existing clients about Poppy Design Studio products or services where permitted by applicable electronic marketing and data protection laws.
We do not sell or provide our marketing lists to other organisations for their own marketing.
Every marketing email provides a simple way to unsubscribe.
You can unsubscribe at any time using the unsubscribe link in the email or by contacting:
Unsubscribing from marketing will not stop essential communications relating to services you receive from us, such as project communications, invoices, hosting information, domain renewals or other service-related messages.
Who we share information with
We do not sell personal information.
We use trusted third-party providers to help us operate our business and provide our services.
These may include:
- Zoho CRM – client and relationship management
• Brevo – newsletter and email communication services
• Website hosting and infrastructure providers
• Domain registrars and registries
• Email service providers
• Accounting and bookkeeping providers
• Payment providers
• IT, website maintenance and security providers
• Contractors or suppliers involved in delivering services to our clients
• Professional advisers
• Government, regulatory or law enforcement organisations where required by law
We only share information where there is an appropriate reason to do so.
Where another organisation processes personal information on our behalf, we take appropriate steps to ensure information is handled securely and in accordance with applicable data protection requirements.
International data transfers
Some technology and service providers we use may process personal information outside the United Kingdom.
Where personal information is transferred outside the UK, we take appropriate steps to ensure the transfer complies with UK data protection law.
Depending on the circumstances, this may include transferring information to a country covered by UK adequacy regulations or using approved contractual safeguards or other legally recognised transfer mechanisms.
How long we keep your information
We only retain personal information for as long as reasonably necessary for the purpose for which it was collected and to meet our legal, accounting, contractual and regulatory obligations.
Different types of information may therefore be retained for different periods.
When deciding how long information should be kept, we consider:
- Why the information was collected
• Whether we still provide services to you
• Whether the information is required to manage an ongoing service, such as hosting, email or domain registration
• Legal and accounting requirements
• Contractual obligations
• Whether information may be required to establish or defend a legal claim
When information is no longer required, we will securely delete, anonymise or otherwise dispose of it where appropriate.
How we protect your information
We take reasonable technical and organisational measures to protect personal information from unauthorised access, disclosure, alteration, loss or misuse.
These measures include appropriate access controls, secure systems, website security measures, backups and procedures governing who can access personal information.
While we take appropriate steps to protect information, no internet-based system can be guaranteed to be completely secure.
Your data protection rights
Depending on the circumstances, you may have the right to:
- Ask for access to the personal information we hold about you
• Ask us to correct inaccurate or incomplete information
• Ask us to erase your personal information in certain circumstances
• Ask us to restrict how we use your information in certain circumstances
• Object to certain uses of your personal information
• Receive certain information in a portable format and ask for it to be transferred to another organisation where applicable
• Withdraw consent where we rely on consent
You have the right to object at any time to the use of your personal information for direct marketing.
These rights do not apply in every circumstance, and the law may allow or require us to continue processing or retaining certain information.
To exercise any of these rights, contact:
We may need to confirm your identity before responding.
There is normally no charge for exercising your data protection rights.
Cookies
What are cookies?
Cookies are small files that websites can place on your computer, tablet or mobile device when you visit them.
They can be used for a variety of purposes, such as making a website function correctly, remembering preferences, maintaining security or understanding how a website is used.
Some cookies are essential for a website to work. Others may be used for analytics, advertising or other purposes.
How we use cookies
The Poppy Design Studio website may use cookies that are necessary for the website to function correctly, securely and reliably.
These may include cookies used for:
- Website functionality
• Security and fraud prevention
• Remembering essential website preferences
• Managing forms and website features
• Remembering your cookie or privacy choices where applicable
Cookies that are strictly necessary for the operation of the website do not generally require consent.
Where we use cookies or similar technologies that require consent, we will ask for your permission before they are activated.
Analytics
We use Independent Analytics to understand general website usage and performance.
Independent Analytics is designed to work without placing analytics cookies on visitors’ devices and does not use cookies to track individual visitors.
This means we can understand how our website is being used without using traditional tracking cookies such as those commonly associated with some third-party analytics platforms.
We do not currently use Google Analytics or Meta Pixel.
Third-party content and services
Some features of our website may connect to or include content provided by third parties.
Depending on the features available on a particular page, a third party may use cookies or similar technologies when you interact with its content or service.
Where non-essential third-party cookies require consent, they should not be activated until the appropriate consent has been provided.
Third-party services are also governed by their own privacy and cookie policies.
Managing cookies
Most web browsers allow you to view, delete or block cookies through your browser settings.
You can normally choose to:
- Delete existing cookies
• Block all cookies
• Block cookies from particular websites
• Allow or block third-party cookies
• Change how your browser handles cookies
Blocking all cookies may affect how some parts of our website or other websites function.
Where our website provides a cookie preference or consent tool, you can also use this to manage applicable choices.
Changes to the cookies we use
Our website and the technology we use may change over time.
If we introduce new services that use cookies or other tracking technologies, we will review this policy and our cookie consent arrangements and update them where necessary.
Other important information
Third-party websites
Our website may contain links to websites, social media platforms and services operated by third parties.
If you follow one of these links, the way that organisation collects and uses your information will be governed by its own privacy policy.
Poppy Design Studio is not responsible for the privacy practices of third-party websites.
Social media
Poppy Design Studio uses social media to communicate with clients, businesses and the wider community.
If you interact with us through a social media platform, that platform may process information about you in accordance with its own privacy policy and terms.
Information you choose to make publicly available through social media may also be visible to us and other users of that platform.
Automated decision-making
We do not currently use personal information to make solely automated decisions that produce legal or similarly significant effects on individuals.
Making a complaint
If you have concerns about how we have handled your personal information, please contact us so that we have an opportunity to investigate.
Email: hello@poppydesignstudio.com
You also have the right to complain to the Information Commissioner’s Office (ICO), the UK’s independent data protection regulator.
Information Commissioner’s Office
Wycliffe House
Water Lane
Wilmslow
Cheshire
SK9 5AF
Telephone: 0303 123 1113
Further information is available from the Information Commissioner’s Office.
Changes to this Privacy & Cookie Policy
We may update this policy from time to time to reflect changes to our services, website, technology or legal requirements.
The latest version will always be published on this page and the date at the top will show when it was last updated.
Contact us
If you have any questions about this Privacy & Cookie Policy or how we use your personal information, please contact:
Poppy Design Studio & Marketing Ltd
Hazelrigg House
33 Mare Fair
Northampton
NN1 1SR
Email: hello@poppydesignstudio.com
Telephone: 0800 321 3843
© Poppy Design Studio & Marketing Ltd. All rights reserved.